ㅡ.ㅡ

[Code] Sonarqube 본문

Security

[Code] Sonarqube

ekwkqk12 2021. 10. 23. 16:54

Helm Chart 다운로드

helm repo add sonarqube https://SonarSource.github.io/helm-chart-sonarqube
helm repo update
helm pull sonarqube/sonarqube --untar
kubectl create namespace sonarqube
helm upgrade --install sonarqube -f Chart_path/values.yaml Chart_path -n sonarqube

values.yaml 수정(Ingress 설정)

  1. Ingress 생성
  2. Promethues Exporter 비활성화
  3. 볼륨 생성(Delete 정책)
  4. 비밀번호 설정(admin계정)
## 1
64 ingress:
65   enabled: true
66   hosts:
67     - name: 호스트주소
68       # Different clouds or configurations might need /* as the default path
69       path: "/*"
70       serviceName: sonarqube-sonarqube
71       servicePort: 9000
72   annotations:
73     kubernetes.io/ingress.class: alb
74     alb.ingress.kubernetes.io/target-type: ip
75     alb.ingress.kubernetes.io/scheme: internet-facing
76     alb.ingress.kubernetes.io/group.order: '3'
77     alb.ingress.kubernetes.io/group.name: external-alb
78     alb.ingress.kubernetes.io/success-codes: 200,301,302
79     alb.ingress.kubernetes.io/load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=refine-it-access-log,access_logs.s3.prefix=lb

## 2
202 prometheusExporter:
203   enabled: false

## 3
291 persistence:
292   enabled: true
293   ## Set annotations on pvc
294   annotations: {}
295
296   ## Specify an existing volume claim instead of creating a new one.
297   ## When using this option all following options like storageClass, accessMode and size are ignored.
298   # existingClaim:
299
300   ## If defined, storageClassName: <storageClass>
301   ## If set to "-", storageClassName: "", which disables dynamic provisioning
302   ## If undefined (the default) or set to null, no storageClassName spec is
303   ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
304   ##   GKE, AWS & OpenStack)
305   ##
306   storageClass:
307   accessMode: ReadWriteOnce
308   size: 30Gi
309   uid: 1000

## 4
467 account:
468   adminPassword: 변경할 비밀번호
469   currentAdminPassword: admin
470   curlContainerImage: curlimages/curl:latest
471   adminJobAnnotations: {}
472   terminationGracePeriodSeconds: 60

'Security' 카테고리의 다른 글

[Container] Trivy Docker image Scan  (0) 2021.10.28
[Code] Sonarqube Code Analysis  (0) 2021.10.23
[WEB] 데이터 평문 전송  (0) 2019.02.09
[WEB] XSS  (0) 2019.02.08
[WEB] 불 필요한 Method 지원  (0) 2019.02.08